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RECOP017 
09/654,347 
Douglas B. Moran 
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August 30, 2000 



U.S. Patent Documents 



Examiner 
Initial 
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Patent No. 


Date 


Patentee 


Class 
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class 


Filing 
Date 




A 


5,621,889 


4/15/1997 


Lermuzeaux et al. 


395 


186 


6/8/1994 




B 


5,757,913 


5/26/1998 


Bellare et al. 


380 


23 


4/23/1993 




C 


5,844,986 


12/1/1998 


Davis 


380 


4 


9/30/1996 




D 


5,778,070 


7/7/1998 


Mattison 


380 


25 


6/28/1996 
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5,649,194 


7/15/1997 


Miller et al. 


395 


616 


6/2/1995 




F 


5,574,898 


11/12/1996 


Leblang et al. 


395 


601 


1/8/1993 
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5,724,569 


3/3/1998 


Andres 


395 


602 


6/28/1995 




H 


5,680,585 


10/21/1997 


Bruell 


395 


500 


3/31/1995 




I 


5,978,791 


11/2/1999 


Farber et al. 


707 


2 


10/24/1997 
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5,638,509 


6/10/1997 


Dunphy et al. 


395 


182.18 


6/13/1996 
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Document 
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class 


Translation 


Yes 


No 




L 

















Other Documents 
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Initial 
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Author, Title, Date, Place (e.g. Journal) of Publication 






Rebecca Bace, INTRODUCTION TO INTRUSION DETECTION 
ASSESMENT, no date, for System and Network Security Management 




N 


Gene H. Kim and Eugene H. Spafford, WRITING, SUPPORTING AND 
EVALUATING TRIPWIRE: A PUBLICALLY AVAILABLE SECURITY 
TOOL, March 12, 1994, Purdue Technical Report; Purdue University 




0 


Douglas B. Moran et al, DERBI: DIAGNOSIS, EXPLANATION AND 
RECOVERY FROM BREAK-INS, no date, Artificial Intelligence Center 
SRI International 




P 


Mabry Tyson, Ph.D., EXPLAINING AND RECOVERING FROM 
COMPUTER BREAK-INS, January 12, 2001, SRI International 
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Aleph One, SMASHING THE STACK FOR FUN AND PROFIT, no date, 
Volume Seven, Issue Forty-Nine; File 14 of 16 of BugTraq, rOOt, and 
Underground. Org 



R 
t 



Donald C. Latham, DEPARTMENT OF DEFENSE TRUSTED 
COMPUTER SYSTEM EVALUATION CRITERIA, December 1985, 
Department of Defense Standard 



S 



James P. Anderson Co., COMPUTER SECURITY THREAT 
MONITORING AND SURVEILLANCE, February 26, 1980, Contract 
79F296400 



Teresa F. Hunt et al., A REAL-TIME INTRUSION-DETECTION EXPERT 
SYSTEM (IDES), February 28, 1992, SRI International Project 6784 



Examiner 



Date Considered 



Examiner: Initial citation considered. Draw line through citation if not in conformance and not 
considered. Include copy of this form with next communication to applicant. 
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